this repo has no description
use klbr net for hydrant and plc
+44
-40
+2
-1
dns/dnsconfig.js
+2
-1
dns/dnsconfig.js
···
67
67
CF_PROXY_OFF,
68
68
),
69
69
DZWONEK("vpn", CF_PROXY_OFF),
70
-
VOLSINII(["plc", "hydrant", "relay"], CF_PROXY_OFF),
70
+
VOLSINII(["plc"], CF_PROXY_OFF),
71
71
// github pages
72
72
CNAME("dev", "90-008.github.io."),
73
73
// fastmail
···
98
98
REG_NONE,
99
99
DnsProvider(DSP_PRIMARY),
100
100
TRIMOUNTS("@"),
101
+
VOLSINII(["plc", "hydrant"]),
101
102
TXT("@", "a data endpoint for entity with serial id /90008/."),
102
103
TXT(
103
104
"@",
+4
-4
hosts/volsinii/modules/hydrant-doc.nix
+4
-4
hosts/volsinii/modules/hydrant-doc.nix
···
1
1
{ ... }:
2
2
let
3
-
domain = "hydrant.gaze.systems";
3
+
rootDomain = "klbr.net";
4
+
domain = "hydrant.${rootDomain}";
4
5
in
5
6
{
6
-
security.acme.certs."plc.gaze.systems".extraDomainNames = [domain];
7
-
7
+
security.acme.certs."plc.${rootDomain}".extraDomainNames = [domain];
8
8
services.nginx.virtualHosts.${domain} = {
9
-
useACMEHost = "plc.gaze.systems";
9
+
useACMEHost = "plc.${rootDomain}";
10
10
forceSSL = true;
11
11
quic = true;
12
12
kTLS = true;
+2
-35
hosts/volsinii/modules/nginx.nix
+2
-35
hosts/volsinii/modules/nginx.nix
···
47
47
webroot = "/var/lib/acme/acme-challenge";
48
48
};
49
49
certs."plc.gaze.systems" = {
50
-
extraDomainNames = ["relay.gaze.systems"];
50
+
# extraDomainNames = ["relay.gaze.systems"];
51
51
};
52
-
};
53
-
54
-
services.nginx.virtualHosts."plc.gaze.systems" = {
55
-
useACMEHost = "plc.gaze.systems";
56
-
forceSSL = true;
57
-
quic = true;
58
-
kTLS = true;
59
-
locations."/" = {
60
-
proxyPass = "http://localhost:8000";
61
-
proxyWebsockets = true;
62
-
};
63
-
};
64
-
65
-
systemd.services.allegedly = {
66
-
description = "allegedly mirror service";
67
-
after = [ "network.target" ];
68
-
wantedBy = [ "multi-user.target" ];
69
-
serviceConfig = {
70
-
Type = "simple";
71
-
WorkingDirectory = "/root/allegedly2";
72
-
ExecStart = "/root/allegedly2/target/release/allegedly mirror --wrap-fjall /root/plc3";
73
-
Restart = "on-failure";
74
-
RestartSec = "5s";
75
-
};
76
-
};
77
-
78
-
services.nginx.virtualHosts."relay.gaze.systems" = {
79
-
useACMEHost = "plc.gaze.systems";
80
-
forceSSL = true;
81
-
quic = true;
82
-
kTLS = true;
83
-
locations."/xrpc/" = {
84
-
proxyPass = "http://localhost:3000/xrpc/";
85
-
proxyWebsockets = true;
52
+
certs."plc.klbr.net" = {
86
53
};
87
54
};
88
55
}
+36
hosts/volsinii/modules/plc.nix
+36
hosts/volsinii/modules/plc.nix
···
1
+
{
2
+
services.nginx.virtualHosts."plc.gaze.systems" = {
3
+
useACMEHost = "plc.gaze.systems";
4
+
forceSSL = true;
5
+
quic = true;
6
+
kTLS = true;
7
+
locations."/" = {
8
+
proxyPass = "http://localhost:8000";
9
+
proxyWebsockets = true;
10
+
};
11
+
};
12
+
13
+
services.nginx.virtualHosts."plc.klbr.net" = {
14
+
useACMEHost = "plc.klbr.net";
15
+
forceSSL = true;
16
+
quic = true;
17
+
kTLS = true;
18
+
locations."/" = {
19
+
proxyPass = "http://localhost:8000";
20
+
proxyWebsockets = true;
21
+
};
22
+
};
23
+
24
+
systemd.services.allegedly = {
25
+
description = "allegedly mirror service";
26
+
after = ["network.target"];
27
+
wantedBy = ["multi-user.target"];
28
+
serviceConfig = {
29
+
Type = "simple";
30
+
WorkingDirectory = "/root/allegedly2";
31
+
ExecStart = "/root/allegedly2/target/release/allegedly mirror --wrap-fjall /root/plc3";
32
+
Restart = "on-failure";
33
+
RestartSec = "5s";
34
+
};
35
+
};
36
+
}